Forum Discussion
Retrieve vlan mac address with get_true_mac_address method
I was tasked with the project to retrieve the MAC addresses in use by BIG-IP. I have attempted to use the get_true_mac_address method in ITCMNetworking/VLAN. I am getting nothing coming back.
Any ideas?
Thanks,
Anthony
String get_true_mac_address(
in SessionCredentials creds, <== CORBA Specific
in String vlan_name
);
$soap = SOAP::Lite
-> uri('urn:iControl:ITCMNetworking/VLAN')
-> proxy("https://$sHost/iControl/iControlPortal.cgi");
$vName = "external";
$soap_response = $soap->get_true_mac_address(SOAP::Data->name(vlan_name => $vName ) );
$macAddr = $soap_response->result;
print "\nVlan Name: $vName MAC Address: $macAddr\n";
6 Replies
- MichaelOLeary
Employee
Hoping this article and the diagrams can help out those looking to use Azure internal load balancer. Please leave a comment if you have any questions or feedback on this article.
- Sajid_Gul_Ambe1
Nimbostratus
Hi this article is useful for understanding. Can you please share the ARM template for Option B and Option A ? waiting for your kind response.
I have the same scenerio. I dont want to expose F5 WAF directly to the Internet. my WAF will be behind Perimeter firewall. Kindly advise
sajid.khan@qdsnet.com
- Sajid_Gul_Ambe1
Nimbostratus
I would like to share some points related to our scenario.
In Our case, we have an Internet-facing firewall that will proxy inbound traffic to BIGIP (in our case, there is no need to expose BIG-IP to the Internet).
We would like to run BIG IP pair Active/Active but could also run Active/Standby based on your suggestion
we do not want to automate the update of Azure routes at the time of failover
We want to use an Azure Load Balancer (ALB) to ensure HA for our BIG-IP pair. This makes failover times faster in Azure as compared to other options like API. (Please correct me if I am wrong)
Also, we would like to access both F5 pair separately using out of band management.
Based on our use case can you please share the custom ARM template that would help us to deploy BIG IP as per our scenario
- MichaelOLeary
Employee
Hi Sajid,
Here's a template that will deploy a perimeter firewall and F5 WAF behind it. There's a diagram in the ReadMe that shows the architecture of what will be deployed.
https://github.com/mikeoleary/azure-f5-palo
Here is a devcentral article that explains the demo too.
https://devcentral.f5.com/s/articles/Deploy-F5-and-PaloAlto-in-Azure-with-this-demo
Can you let me know if this helps you? -Mike.
- Sajid_Gul_Ambe1
Nimbostratus
Hi Micheal,
First of All I am really thankful to you for such a nice informative article and second thanks for the reply.
let me check this template and will update you asap.
- Sajid_Gul_Ambe1
Nimbostratus
Can you please share me that template which will deploy only F5WAF?
- Sajid_Gul_Ambe1
Nimbostratus
if I use this same template and after the deployment if i delete the Palo Alto VMs i think this will work for me as well please correct me if i am wrong
- Sajid_Gul_Ambe1
Nimbostratus
Also I have tested just now In this template how Can I assign Existing Vnets and subnets as per our environment ?
- Sajid_Gul_Ambe1
Nimbostratus
In My Case I have to deploy BYOL in Hub Vnet
- MichaelOLeary
Employee
Hi Sajid,
If you have an existing VNET, I recommend you start with a template from F5 Networks' official repo. This does deploy an External Azure Load Balancer, but you could edit the template to deploy an internal load balancer. Assuming you want an HA pair of 3-NIC devices licensed via BYOL into an existing VNET, this is the template I recommend starting with:
You might deploy this template and then delete the external Load Balancer and deploy an internal Load Balancer instead, if you are uncomfortable with editing a template yourself. I am unable to customize a template specifically for your individual situation.
Does that make sense? You could also ask your F5 account about professional services if you need.